Agent-based backup of Windows, Linux, Max, AIX and Solaris machines.
Post Reply
massimiliano.rizzi
Service Provider
Posts: 210
Liked: 27 times
Joined: Jan 24, 2012 7:56 am
Full Name: Massimiliano Rizzi
Contact:

Network ports that must be opened for pre-deployed Veeam Agents

Post by massimiliano.rizzi »

Hello experts and good day,

let’s consider a specific scenario involving a segmented Veeam Infrastructure and a Protection Group for pre-deployed Veeam Agents, when deploying them from the Veeam backup server is not the best solution for various reasons.

Now regarding the network ports that must be opened, my understanding is that apart from the network ports that must be opened to ensure proper communication between Veeam Agent Computers and Veeam backup repositories, the only port needed between Veeam Agent Computers and the Veeam Backup Server itself narrows down to TCP 10005.

Is my understanding correct ?

Thanks and Regards,

Massimiliano
Mildur
Product Manager
Posts: 9525
Liked: 2524 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Network ports that must be opened for pre-deployed Veeam Agents

Post by Mildur »

Hi Massimiliano

It seems the documentation doesn't cover port exceptions when you use "pre-installed agents".
Let me discuss with tech writers if we can tag ports which are not required by pre-installed agents.

I suggest to only open Port 10005 for Agent > backup server.
Port 10001 will become necessary when you need to do a bare metal restore. You need to decide if you want to open it now or later when you need todo the restore.

Port 2500 to 3300 would be required for our inline scan feature. Inline scan is only available for "managed by backup server" jobs. But please let me confirm that with the team.

Best,
Fabian
Product Management Analyst @ Veeam Software
massimiliano.rizzi
Service Provider
Posts: 210
Liked: 27 times
Joined: Jan 24, 2012 7:56 am
Full Name: Massimiliano Rizzi
Contact:

Re: Network ports that must be opened for pre-deployed Veeam Agents

Post by massimiliano.rizzi »

Hi Massimiliano

It seems the documentation doesn't cover port exceptions when you use "pre-installed agents".
Let me discuss with tech writers if we can tag ports which are not required by pre-installed agents.

I suggest to only open Port 10005 for Agent > backup server.
Hello Fabian,

thanks a lot for your reply - straight to the point! That is exactly the answer I was looking for.

And yes, I agree that it might be useful to also cover this specific scenario in the documentation in order for Veeam administrators to be able to provide Network Teams/Security Teams the actual, narrowed-down, list of ports needed in such scenario.

Thanks!

Massimiliano
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests